Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
File:                     Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft (raw, json)
Hash identifier:          BSfKVoeObcZZ09fJ1nXjZ51thIMwj6cxH9ctTogH1ic=
Subject key identifier:   A0:00:76:D3:27:71:FA:28:71:D3:F0:B8:98:E4:91:40:5E:21:E5:D1
Authority key identifier: 0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
Certificate issuer:       /CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Certificate serial:       018FD9AEA84D9244A88C10AA9FAEB47DC842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
Manifest number:          061E
Signing time:             Sun 02 Jun 2024 16:00:53 +0000
Manifest this update:     Sun 02 Jun 2024 16:00:53 +0000
Manifest next update:     Mon 03 Jun 2024 16:00:53 +0000
Files and hashes:         1: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl (hash: GO0Va524TDBaMoF9nSNqhKRe+aj6EGzLEzm5NpC5Mmw=)
                          2: W3y7u2g9NtdZgM-Bk0FIL4Ts9xs.roa (hash: FFqDPdAt8yYUgCt1VUIl0KsoOpSy32KbURaYuItntwg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d9:ae:a8:4d:92:44:a8:8c:10:aa:9f:ae:b4:7d:c8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
        Validity
            Not Before: Jun  2 16:00:53 2024 GMT
            Not After : Jun  3 16:00:53 2024 GMT
        Subject: CN=a00076d32771fa2871d3f0b898e491405e21e5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f7:6e:72:47:9f:a8:65:e9:d3:77:6e:d8:ee:
                    a9:c2:1b:22:ec:3b:27:24:19:b2:c6:6a:17:df:74:
                    34:e9:64:e9:03:52:cd:d1:cc:1f:16:c4:2a:b3:eb:
                    cd:f4:a3:68:55:4a:56:71:fb:92:a9:b6:f8:4e:b9:
                    93:d7:89:71:17:48:e8:2a:cf:43:9a:31:e2:2d:43:
                    7a:45:68:0f:68:15:40:99:d8:8c:92:4e:6a:4d:e5:
                    a5:fb:b8:89:e8:db:81:64:7f:41:68:5d:3e:8a:89:
                    99:3d:d8:33:54:74:64:92:bb:7a:40:a5:bb:44:f8:
                    f2:99:53:8b:5f:fb:1d:5b:ff:4f:14:38:c5:20:dc:
                    ef:b5:0b:13:ef:1d:cd:4a:23:fd:18:46:a9:e7:60:
                    cf:9a:f0:8a:60:05:b6:0f:07:2f:d0:88:db:e2:3c:
                    24:55:e7:b5:a4:9e:d6:6c:33:66:57:87:91:4b:c1:
                    9f:56:51:9d:42:95:15:d6:63:9f:29:72:b3:66:ba:
                    62:a8:37:2a:79:57:70:ec:28:c1:58:25:ad:15:8a:
                    f3:55:16:12:1e:a8:01:59:53:ed:22:29:09:88:cc:
                    d8:48:cb:cd:83:40:f0:6c:c2:f5:a0:f2:32:90:d0:
                    21:18:70:3c:26:a3:27:85:c1:ef:05:3d:d3:e5:6a:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:00:76:D3:27:71:FA:28:71:D3:F0:B8:98:E4:91:40:5E:21:E5:D1
            X509v3 Authority Key Identifier:
                keyid:0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1e:f0:b3:ec:69:23:6b:71:e4:f9:f4:0f:61:2c:2d:a9:e6:
         b4:d0:c8:c8:26:52:9d:2c:dc:43:3e:d7:74:ed:0a:97:b0:69:
         74:91:3e:e3:0d:20:23:8a:d7:5c:21:9e:16:0a:2e:01:ef:1f:
         c7:da:38:33:34:6e:8f:72:41:5b:73:e8:db:3f:8a:b6:c2:c1:
         c4:e4:25:f8:d2:8a:83:76:35:c7:1c:21:dc:b2:d2:93:ba:a9:
         6e:5e:52:99:c3:bf:5d:5c:26:44:0a:97:68:6b:72:87:77:6b:
         36:2a:61:19:2f:ae:91:60:38:4a:8e:26:54:90:47:78:26:8a:
         8c:9c:fd:b8:f9:70:3e:04:4c:b9:65:ef:78:b8:10:8c:d4:ab:
         ca:61:62:14:0f:ce:7a:27:3c:32:a4:2d:51:a2:c5:44:b7:b1:
         e8:82:d7:d6:66:00:e5:40:7f:b4:ce:6e:ad:f6:4a:a0:10:e8:
         4b:6e:89:94:f2:de:19:c6:96:90:d0:c5:64:79:7d:a0:a0:b9:
         3b:c6:cf:27:18:2e:14:2e:ea:73:14:85:53:8f:70:d1:1d:e3:
         68:5c:03:18:ab:36:91:de:50:4f:54:ac:35:b3:19:a5:d8:b3:
         79:ff:33:69:a7:ac:ef:b6:f5:13:ee:2a:1c:55:ee:64:1b:d3:
         c3:2c:6a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:21:18 2024 by rpki-client on console-fra.rpki-client.org